Domain > assets.prod.airrobe.link

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2021-09-29	13.227.40.113 (ClassC)
2021-09-29	13.227.40.3 (ClassC)
2021-11-09	52.84.121.14 (ClassC)
2021-11-09	52.84.121.85 (ClassC)
2022-01-01	65.8.56.116 (ClassC)
2022-01-01	65.8.56.117 (ClassC)
2022-01-01	65.8.56.81 (ClassC)
2023-08-28	18.161.135.29 (ClassC)
2024-02-15	18.172.170.108 (ClassC)
2024-11-13	18.172.170.51 (ClassC)
2024-12-09	99.84.66.118 (ClassC)
2025-03-01	99.86.91.47 (ClassC)
2025-05-13	99.84.66.99 (ClassC)
2025-06-12	99.84.66.71 (ClassC)
2025-08-11	99.84.66.90 (ClassC)
2025-12-05	3.169.173.79 (ClassC)
2026-02-18	3.169.173.38 (ClassC)

HTTP/1.1 200 OKContent-Type: text/html; charsetutf-8Transfer-Encoding: chunkedConnection: keep-aliveDate: Thu, 15 Feb 2024 09:01:14 GMTX-Frame-Options: SAMEORIGINX-XSS-Protection: 1; modeblockX-Conten

!DOCTYPE html>head>meta charsetutf-8>script>  function onDocumentReady(fn) {    if (document.attachEvent ? document.readyState  complete : document.readyState ! loading){      fn();    } else {      document.addEventListener(DOMContentLoaded, fn);    }  };/script>script typetext/javascript>  //conditionally include //source: https://segment.com/docs/connections/sources/catalog/libraries/website/javascript/quickstart/    (function(){      console.debug(initializing SegmentClient (analytics.js));      // Create a queue, but dont obliterate an existing one!      var analytics  window.analytics  window.analytics || ;      // If the real analytics.js is already on the page return.      if (analytics.initialize) return;      // If the snippet was invoked already show an error.      if (analytics.invoked) {        if (window.console && console.error) {          console.error(Segment snippet included twice.);        }        return;      }      // Invoked flag, to make sure the snippet      // is never invoked twice.      analytics.invoked  true;      // A list of the methods in Analytics.js to stub.      analytics.methods          trackSubmit,        trackClick,        trackLink,        trackForm,        pageview,        identify,        reset,        group,        track,        ready,        alias,        debug,        page,        once,        off,        on,        addSourceMiddleware,        addIntegrationMiddleware,        setAnonymousId,        addDestinationMiddleware      ;      // Define a factory to create stubs. These are placeholders      // for methods in Analytics.js so that you never have to wait      // for it to load to actually record data. The `method` is      // stored as the first argument, so we can replay the data.      analytics.factory  function(method){        return function(){          var args  Array.prototype.slice.call(arguments);          args.unshift(method);          analytics.push(args);          return analytics;        };      };      // For each of our methods, generate a queueing s

Port 443

HTTP/1.1 200 OKContent-Type: text/html; charsetutf-8Transfer-Encoding: chunkedConnection: keep-aliveDate: Thu, 15 Feb 2024 09:01:15 GMTX-Frame-Options: SAMEORIGINX-XSS-Protection: 1; modeblockX-Conten

Subdomains

Date	Domain	IP
images.prod.airrobe.link	2025-04-11	99.84.66.61
assets.prod.airrobe.link	2024-02-15	18.172.170.108

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > assets.prod.airrobe.link

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains